$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/28374966-4893-30c8-87f8-5f4306e813d9.roa File: 28374966-4893-30c8-87f8-5f4306e813d9.roa (raw, json) Hash identifier: fO15txL4vAso4UGhexcYdeZ5h1jB8yFH2FTdh4XbdZ0= Subject key identifier: 10:5B:40:5E:B0:73:D2:15:B2:5B:55:01:35:2E:FB:C0:3F:A9:12:9C Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F5A32A5143CE489318558FF80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/28374966-4893-30c8-87f8-5f4306e813d9.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 6079 IP address blocks: 142.111.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:a5:14:3c:e4:89:31:85:58:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=c04364c0-b5a2-4279-8021-f0eb6393b370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1c:7f:3e:f2:b0:9e:a4:25:61:90:c2:5b:64: 56:a9:0c:ac:54:af:1c:27:97:40:15:25:f9:3f:f4: ca:dd:58:45:af:07:d6:de:c7:b6:03:bf:8c:c3:ca: ec:30:41:bf:2a:77:1a:c4:2e:17:02:71:35:a3:59: f6:bf:25:a5:d4:dc:74:ac:47:7e:d3:74:9f:2f:c5: 57:57:45:f4:54:fe:28:70:09:47:9a:69:68:a1:b7: eb:32:33:a4:7f:b8:4a:bf:6e:6d:c9:1c:88:01:b5: e1:2b:25:4f:dd:69:94:e8:1d:1f:2b:83:b0:b9:31: 90:78:b8:60:76:11:44:2f:72:1b:b4:3e:84:aa:53: 69:8e:54:ba:b6:c9:f4:85:f1:b3:23:19:0e:0e:bb: e6:78:ce:de:70:8f:cf:ed:03:07:5b:19:19:3f:26: 53:cc:4b:ab:c7:03:99:a7:3d:0d:f9:43:0b:19:49: b7:6a:a7:ea:06:41:d7:d3:11:89:1d:57:a5:47:84: 40:9a:c6:ce:d3:8e:68:26:5d:ac:7f:96:84:7a:3d: b7:61:56:b9:0f:eb:b5:8e:ea:fb:21:f5:9a:0e:cf: 51:e5:49:7e:15:42:60:d8:ac:62:da:58:5c:91:ed: fd:4a:bb:b5:27:24:be:37:9d:7f:9b:c9:57:95:a8: 13:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5B:40:5E:B0:73:D2:15:B2:5B:55:01:35:2E:FB:C0:3F:A9:12:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/28374966-4893-30c8-87f8-5f4306e813d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 142.111.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:b9:22:21:24:9e:10:89:f7:0c:e1:fb:db:c5:cd:99:28:10: 0d:58:92:75:4e:8e:97:f5:96:b0:a1:98:45:75:b1:26:af:12: 77:2b:4c:6c:57:cc:15:56:d9:27:58:c2:0a:55:37:e5:9f:ce: 60:1e:07:34:9a:22:71:7b:7c:12:0c:b9:98:d8:2a:43:0e:9f: c3:4e:5c:8b:e6:23:7b:b9:fc:4a:0c:0d:ac:6a:14:71:1a:53: dd:78:83:73:36:cb:a4:c1:02:33:11:f9:f3:ad:6f:60:ec:92: fd:54:4f:60:09:5b:b3:12:5f:4c:2e:4e:39:ba:31:87:2b:17: d1:8a:dc:e4:b2:c0:a5:b7:28:9a:a5:c6:9e:8d:f5:09:66:3f: dd:1e:92:b7:f6:6f:49:4a:48:3f:98:ff:1e:59:1f:8d:e8:3b: 75:2f:07:f5:89:8b:80:4f:51:d5:98:b3:0d:6b:70:67:92:07: a3:ee:60:a5:0d:2d:f7:9e:1c:1f:be:f0:bc:8d:93:00:60:c7: a9:f4:e6:0e:16:79:69:02:fb:ed:f1:95:8d:cb:21:63:36:26: ca:a3:1d:69:fd:93:6b:29:d2:18:3d:02:ef:96:46:f7:8a:35: 32:25:0b:72:2d:06:d4:e4:72:05:72:29:5b:a6:d5:ff:4a:49: 08:16:c2:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMqUUPOSJMYVY/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk YzA0MzY0YzAtYjVhMi00Mjc5LTgwMjEtZjBlYjYzOTNiMzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Bx/PvKwnqQlYZDCW2RWqQysVK8cJ5dAFSX5 P/TK3VhFrwfW3se2A7+Mw8rsMEG/KncaxC4XAnE1o1n2vyWl1Nx0rEd+03SfL8VX V0X0VP4ocAlHmmloobfrMjOkf7hKv25tyRyIAbXhKyVP3WmU6B0fK4OwuTGQeLhg dhFEL3IbtD6EqlNpjlS6tsn0hfGzIxkODrvmeM7ecI/P7QMHWxkZPyZTzEurxwOZ pz0N+UMLGUm3aqfqBkHX0xGJHVelR4RAmsbO045oJl2sf5aEej23YVa5D+u1jur7 IfWaDs9R5Ul+FUJg2Kxi2lhcke39Sru1JyS+N51/m8lXlagTxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBbQF6wc9IVsltVATUu+8A/qRKcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMjgzNzQ5NjYtNDg5My0z MGM4LTg3ZjgtNWY0MzA2ZTgxM2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjm/9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIa5IiEknhCJ9wzh+9vFzZkoEA1YknVOjpf1lrChmEV1sSavEncrTGxX zBVW2SdYwgpVN+WfzmAeBzSaInF7fBIMuZjYKkMOn8NOXIvmI3u5/EoMDaxqFHEa U914g3M2y6TBAjMR+fOtb2Dskv1UT2AJW7MSX0wuTjm6MYcrF9GK3OSywKW3KJql xp6N9QlmP90ekrf2b0lKSD+Y/x5ZH43oO3UvB/WJi4BPUdWYsw1rcGeSB6PuYKUN LfeeHB++8LyNkwBgx6n05g4WeWkC++3xlY3LIWM2JsqjHWn9k2sp0hg9Au+WRveK NTIlC3ItBtTkcgVyKVum1f9KSQgWwgs= -----END CERTIFICATE-----Generated at Tue Oct 13 17:44:56 2026 by rpki-client